[Samba] file permissions head-ache on Samba V3.0.4

[Tom Hibbert]

Hi Paul,

You probably want to ensure you have EXT3 ACL support on your server, if
it isn't already.. not sure if Redhate Enterprise supports this out of
the box.

I've found that editing permissions from a Windows NT 4.0 box leads to
acls being set incorrectly on Samba - use win2k or higher.

You probably also want to chown the directories to root, as once the
users specified in the 'admin users' directive in smb.conf authenticate
to the server they will be mapped in as root (you can see this when you
ps aux |grep smbd). I've found the best way to start permissions wise is
with owner root:root and permissions 0777 on the directory, and from the
ACL editor in Windows restrict permissions that way.

Hope this helps

Tom
-----Original Message-----
From: samba-bounces+tom=nsp.co.nz at lists.samba.org
[mailto:samba-bounces+tom=nsp.co.nz at lists.samba.org] On Behalf Of PaulD
Sent: Thursday, 26 August 2004 11:06 p.m.
To: samba at lists.samba.org
Subject: [Samba] file permissions head-ache on Samba V3.0.4

Hi,

I hope that this is a quick answer, as it's probably
been answered many times before and I'm just missing a
very minor setting in my config.

I have just setup a samba server(ver 3.0.4) on a
Redhat Enterprise Linux Box ES3. The box has been
setup as a member of a Windows NT4 domain, it's to be
used as a fileserver for users on the NT domain.

I have configured samba to use domain security, and
have winbind working correctly (I think!!) - I can get
the domain users and groups to show from a 'wbinfo -u
or wbinfo -g.

I have been trying (unsucessfully) to configure the
/home directory so that the domain admins here can
manage the subfolders and the permissions, from the
server administrator or management console on their NT
/ 2000 workstations. 

I have used the following commands on the /home volume
so that the domain admins/users can have access to the
volume:
chown DOMAIN+Administrator /home
chgrp "DOMAIN+Domain Users" /home
(both commands threw back no errors)

I'm guessing that the problem may down to the smb.conf
file but I'm not sure what I'm missing.. would be
grateful if someone could assist.

TIA


________________________________________________________________________
Yahoo! Messenger - Communicate instantly..."Ping" 
your friends today! Download Messenger Now 
http://uk.messenger.yahoo.com/download/index.html